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WHAT IS CLAIMED IS: 

1. A Virtual Private Network (VPN), comprising: 
a shared label switching network; 

a plurality of Virtual Local Access Networks (VLANs) 
5 each coupled to an edge router of the shared label 
switching network, the VLANs each communicating traffic 
with a corresponding edge router utilizing channelized 
Ethernet over SONET (EoS) ; and 

the edge routers interfacing the VLANs with the 
10 shared label switching network. 

2. The VPN of Claim 1, wherein the shared network 
comprises a Multi Protocol Label Switching (MPLS) 
network. 

15 

3 . The VPN of Claim 2 , the edge routers 
comprising : 

a transmit -side edge router operable to convert an 
ingress VLAN packet received from a VLAN and associated 
2 0 with a VPN to an MPLS packet and to send the MPLS packet 
to the MPLS network; and 

a receive- side edge router operable to convert the 
MPLS packet received from the MPLS network to an egress 
VLAN packet and sending the egress VLAN packet to a VLAN 
25 associated with the VPN. 

4. The VPN of Claim 3, the edge routers each 
comprising a first table storing correspondence between 
VLAN identifiers (VIDs) contained in VLAN packets and VPN 
30 labels contained in MPLS packets. 
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5. The VPN of Claim 4, wherein the transmit - side 
edge router finds a VPN label, which corresponds to a 
VLAN identifier (VID) of a VLAN packet, from the first 
table, generates an MPLS packet having the VPN label and 

5 sends the MPLS packet to the MPLS network. 

6. The VPN of Claim 5, wherein the receive -side 
edge router finds a VID, which corresponds to a VPN label 
contained in an MPLS packet received from the MPLS 

10 network, from the first table, generates a VLAN packet 
having the VID and sends the VLAN packet to a VLAN 
indicated by the VID. 

7 . The VPN network of Claim 6 , wherein each edge 
15 routers comprises: 

a route decision unit for determining a route which 
directs an MPLS packet to a receive-side edge router; 

a second table for storing forwarding labels, which 
specify routes decided by the route decision unit, mapped 
20 to addresses of receive-side edge routers; and 

the transmit-side edge router finds a receive-side 
edge router corresponding to a destination of a packet, 
finds a forwarding label, which corresponds to the 
receive-side edge router, from the second table, 
2 5 generates an MPLS packet that contains the VPN label and 
the forwarding label and sends the MPLS packet to the 
MPLS network. 
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8. The VPN of Claim 5, wherein a first edge router 
which constructs the VPN and is connected to a VLAN sends 
a second edge router an address set including an address 
of a VLAN- compatible device connected to the first edge 

5 router and the address of the first edge router, and each 
edge router creates a routing table based upon the 
received information , 

9. The VPN of Claim 8, wherein the transmit-side 
10 edge router finds a receive-side edge router, which 

corresponds to the destination of the packet, from said 
routing table. 

10. The VPN of Claim 3, wherein the transmit-side 
15 edge router discards a VLAN packet having a VID value 

that is greater than a set value. 

11. The VPN of Claim 3, wherein the transmit-side 
edge router inserts user priority information, which is 

20 contained in a tag of a VLAN packet, into a label of an 
MPLS packet as IP precedence information of the MPLS 
network, and the receive-side edge router inserts IP 
precedence information, which is contained in the label 
of an MPLS packet, into the tag of a VLAN packet as user 

2 5 priority information of the VLAN. 
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12 . An edge router of a shared label switching 
network, comprising : 

an Ethernet over SONET (EoS) line card including a 
SONET channelization element operable to receive from a 
5 Virtual Local Access Network (VLAN) a channelized EoS 
signal including a plurality of Ethernet channels and to 
send VLAN packets received in each of the Ethernet 
channels to a corresponding Ethernet interfaces- 
one or more Virtual Private Network (VPN) units 
10 coupled to the Ethernet interfaces and operable to 
identify a VPN for the VLAN packets and to send the VLAN 
packets to a corresponding VPN subrouter based on the 
VPN; and 

each VPN subrouter operable to convert the VLAN 
15 packets to a label switching packet for transmission over 
the shared label switching network in the VPN. 

13. The edge router of Claim 12, wherein the label 
switching network comprises a Multi Protocol Label 

2 0 Switching (MPLS) network. 

14. The edge router of Claim 13, wherein each VPN 
subrouter is operable to convert a VLAN packet to an MPLS 
packet for transmission over the shared MPLS network by 

2 5 replacing a tag of the VLAN packet with a VPN label and a 
forwarding label . 
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15. The edge router of Claim 14, wherein each VPN 
subrouter is further operable to convert the VLAN packet 
to the MPLS packet for transmission over the shared MPLS 
network by inserting user priority information from the 
5 tag of the VLAN packet into a label of the MPLS packet. 
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16. A method, comprising: 

receiving a SONET frame including a plurality of 
Ethernet channels, each Ethernet channel including 
ingress packets associated with one or more Virtual 
5 Private Networks (VPNs) ; 

determining a VPN associated with each ingress 
packet ; and 

converting each ingress packet to an egress label 
switching packet based on the associated VPN for 
10 transmission over a shared network, 

17. The method of Claim 16, wherein the ingress 
packet comprises a Virtual Local Access Network (VLAN) 
packet . 

15 

18. The method of Claim 16, wherein the egress 
label switching packet comprises a Multi Protocol Label 
Switching (MPLS) packet. 
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19. A method, comprising: 

receiving a channelized Ethernet over SONET (EoS) 
signal comprising a plurality of Ethernet channels, each 
Ethernet channel including a plurality of Virtual Local 
5 Access Network (VLAN) packets; 

demultiplexing the Ethernet channels; 

determining a Virtual Private Network (VPN) 
associated with each VLAN packet of each Ethernet 
channel ; and 

10 converting the VLAN packets for each Ethernet 

channel to label switching packets based on the 
associated VPN for transmission through a shared label 
switching network . 



15 20. The method of Claim 19, wherein the label 

switching network comprises a Multi Protocol Label 
Switching (MPLS) network and the label switching packets 
comprise MPLS packets. 



